1. What we collect
- Account information — email, display name and a hashed password, stored in our account system for authentication.
- Billing data — a customer ID from our payment processor. Card details are handled entirely by the processor; we never see or store your full card number.
- Usage metrics — translation minute counts and session metadata, used to enforce plan limits.
- Device data & Anti-Abuse — a one-way, non-reversible cryptographic hash of a hardware identifier (
device_hash) to prevent free-tier trial abuse; the raw identifier is never retained or uploaded. - Live audio streams — captured audio is transmitted transiently over encrypted WebSockets (
wss://) to Google Cloud (Gemini Live API) and Alibaba Cloud (Qwen Realtime API) for real-time translation. We do not store or retain your audio on our servers. Under enterprise API terms, transient audio is not used to train AI models. - On-device speaker identification — speaker diarization (S1/S2 tagging) is computed 100% locally on your computer CPU using embedded
sherpa-onnxmodels. Voice biometric embeddings never leave your device. - Local storage & Security — your browser stores a session token and language preferences; the desktop app stores settings and encrypts BYOK API keys locally using Windows Data Protection API (DPAPI).
2. How we use it
To operate the real-time translation platform and your account, process billing through third-party payment systems, enforce usage quotas and prevent free-tier misuse, and send transactional email via Resend.
3. Third-party sub-processors
Data flows only to trusted sub-processors necessary for service delivery: Google Cloud / AI Studio (Gemini audio translation), Alibaba Cloud / DashScope (Qwen audio translation), PocketBase (account database and subscription management), and Resend (transactional email). We never sell or rent your data.
4. Browser extension privacy
The Voxis browser extension uses tabCapture permissions to capture active tab audio in volatile memory for live translation overlays. Tab audio is processed in RAM only while translation is active and is never stored, profiled, or shared with advertisers.
5. Retention and deletion
Account data persists while your account is active. You may request deletion at any time by contacting [email protected]; we will delete or anonymize your account data within 30 days, except where legal or accounting obligations require retention.
6. Your rights
Depending on your jurisdiction (EU GDPR, UK GDPR, California CCPA, Türkiye KVKK), you have the right to access, correct, export, delete, restrict or object to the processing of your personal data. You may also lodge a complaint with your supervisory authority.
7. Security
Passwords are hashed with argon2/bcrypt; BYOK API keys are encrypted with hardware-bound Windows DPAPI; all transmission uses TLS/SSL (wss://, https://). On-device speech detection (VAD) means silence and non-speech audio never leave your machine.
8. Children
The service is not directed at and may not be used by anyone under 18.
9. Contact & Data requests
Privacy questions and data protection requests: [email protected] or the contact page.